Blog Secure Access Service Edge The Right Steps to SASE: Refactor Internal Data Center Controls to Closed Loop Risk Management
Jun 25 2021

The Right Steps to SASE: Refactor Internal Data Center Controls to Closed Loop Risk Management

The following is an excerpt from Netskope’s recent book Designing a SASE Architecture for Dummies. This is the sixth in a series of seven posts detailing a set of incremental steps for implementing a well-functioning SASE architecture.

Throughout this series, we repeat that the data center is just one more place people and data have to go—it’s no longer the center of attention. When you’re far along in your SASE implementation using NG-SWG, it’s time to reconsider the data center.

Perhaps a few applications that are either too unwieldy to move or too precious to let out of your sight remain in the data center. To access these applications, you could use Netskope Private Access, which eliminates the VPN while providing secure access from anywhere in the world.

As for all those other boxes and bits that have been replaced by NG-SWG services in a SASE architecture? This is your opportunity to dramatically reduce the complexity and upkeep cost of your network, with those old systems depreciating out of existence and receding into the past while you and your enterprise look forward.

Providing Secure Access to the Data Center

Out with the OldIn with NG-SWGNetskope NG-SWG Integrates with . . .
Firewalls, intrusion prevention system (IPS), Domain Name System (DNS)Provides firewall protections as one of many servicesLegacy data center controls for ingress

True SASE yields ongoing operational cost savings. Table 5-6 shows a snapshot of what that can look like with a successful SASE implementation. Your finance people will be among the many stakeholders to thank you!

Ongoing OpEx Savings

DomainWhat HappensSavings
Multi-cloud accessEnable multi-cloud strategy

Improve user experience

Streamline procurement and adoption

Enable business unit–led apps
30% on connection and infrastructure

20% on future cloud costs
VPN replacementRemove VPN appliances

Direct-to-Net traffic for bandwidth-heavy apps

Reduce virtual local area network (VLAN) and firewall policy changes
80% on hardware

50% on security changes and admin
Business partnersManage third-party access

Direct access to published apps

Apply granular controls for activity

Remove lateral movement opportunities
80% on hardware

20% on support time
Mergers & Acquisitions (M&A)Onboarding and integration become more efficient

Consolidates current and future network and security costs

Synchronizes policy
40% on hardware

Onboarding is five times more efficient

If you’d like to read the complete Designing a SASE Architecture for Dummies book, you can download a complimentary copy here!

author image
About the author
Chad Berndtson is global head of content and communications at Netskope. He joined the team in 2020 following several years building successful content, communications, and social media teams at Palo Alto Networks, Tanium, and Fortinet. Earlier in his career, Chad was a technology journalist focused on networking, security, and other IT topics at the dawn of the cloud era.
Chad Berndtson is global head of content and communications at Netskope. He joined the team in 2020 following several years building successful content, communications, and social media teams at Palo Alto Networks, Tanium, and Fortinet. Earlier in his career, Chad was a technology journalist focused on networking, security, and other…